Wireshark packet capture on loopback results in "TCP ACKed unseen segment" and "TCP Previous segment not captured"

Solution Verified - Updated -

Issue

  • Running tshark or dumpcap to packet capture on the loopback interface results in TCP ACKed unseen segment and TCP Previous segment not captured when run in a virtual machine
tshark -i lo "port 80"

Environment

  • Red Hat Enterprise Linux 7
  • Loopback interface
  • Packet capture by Wireshark (including tshark or dumpcap)
  • Virtual machine

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.